+44 20 7946 0321 info@ostrovni.com 42 Kensington High Street, London W8 4PT
Book Now

Privacy Policy

Last updated: 1 August 2026

1. Introduction

Welcome to Ostrovni, operated by Ostrovni Hospitality Ltd (Company No. 14829361), located at 42 Kensington High Street, London W8 4PT. We are committed to protecting and respecting your privacy in accordance with the United Kingdom General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Privacy Policy outlines our practices regarding the collection, use, and safeguarding of your personal information when you visit our website, use our services, or interact with our premium event venue and entertainment hall.

Ostrovni Hospitality Ltd acts as the data controller for the personal data collected through this website and our on-site services. This means we are responsible for determining the purposes and means of processing your personal information. We understand the importance of maintaining your trust, especially given the exclusive and regulated nature of our entertainment lounge, and we take our data protection obligations seriously.

Please read this Privacy Policy carefully to understand our views and practices regarding your personal data and how we will treat it. If you have any questions, our contact details, including those of our Data Protection Officer, are provided at the end of this document.

2. Information We Collect

We may collect, use, store, and transfer different kinds of personal data about you. We have grouped this information into the following categories:

  • Identity Data: Includes first name, last name, title, and date of birth (essential for age verification as our entertainment lounge is strictly 18+).
  • Contact Data: Includes billing address, postal address, email address, and telephone numbers.
  • Financial Data: Includes payment card details, bank account information, and billing history.
  • Transaction Data: Details about payments to and from you, and other details of venues, events, or services you have purchased from us.
  • Profile and Preference Data: Includes your event preferences, dietary requirements, feedback, survey responses, and booking history.
  • Technical Data: Includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system, and platform.
  • Usage Data: Information about how you use our website, venues, and services, including pages visited and time spent on our site.
  • Marketing and Communications Data: Your preferences in receiving marketing from us and our third parties, and your communication preferences.

3. How We Collect Your Information

We use different methods to collect data from and about you, primarily through direct interactions. You may give us your Identity, Contact, and Financial Data by filling in forms on our website or by corresponding with us by post, phone, email, or in person. This includes personal data you provide when you make a booking, request marketing to be sent to you, enter a competition, promotion or survey, or give us feedback.

As you interact with our website, we automatically collect Technical Data and Usage Data about your equipment, browsing actions, and patterns. We collect this personal data by using cookies, server logs, and other similar technologies. Please see our Cookie Policy for further details on how we use these automated technologies.

We may also receive personal data about you from various third parties and public sources. This includes Technical Data from analytics providers such as Google, Contact and Financial Data from payment service providers, and Identity and Contact Data from event partners or social media platforms if you choose to interact with us through those channels.

4. Legal Basis for Processing

Under the UK GDPR, we must have a valid lawful basis to process your personal data. We rely on the following bases:

  • Contractual Necessity: Where we need to perform the contract we are about to enter into or have entered into with you. For example, processing your payment and securing a booking for an event or dining reservation.
  • Legitimate Interests: Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests. This includes improving our website, managing our relationship with you, and maintaining the security of our premises.
  • Legal Obligation: Where we need to comply with a legal or regulatory obligation. A critical example is verifying the age of guests to ensure compliance with UK law, which mandates that entry to our entertainment lounge is strictly for individuals aged 18 and over.
  • Consent: Generally, we do not rely on consent as a legal basis for processing your personal data other than in relation to sending third-party direct marketing communications to you via email or text message. You have the right to withdraw consent to marketing at any time.

5. How We Use Your Information

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data to process your bookings and event enquiries, providing you with the premium services expected at Ostrovni. This includes managing your account, confirming reservations at The Kensington Brasserie or our event spaces, and facilitating payments.

We also use your data to improve our website, services, marketing, customer relationships, and experiences. We may use your Usage and Technical Data to analyse how visitors interact with our site, ensuring content is presented in the most effective manner for you and your computer or mobile device.

Crucially, we use Identity Data to comply with our strict legal obligations regarding age verification. As our entertainment lounge offers activities strictly regulated under UK law, we must ensure all patrons are 18 or older. We also process data to prevent and detect fraud or other unlawful acts, maintaining a safe and secure environment for all our guests.

6. Marketing Communications

We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising. We may use your Identity, Contact, Technical, Usage, and Profile Data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which events, dining offers, and entertainment options may be relevant for you.

You will receive marketing communications from us if you have requested information from us, purchased services from us, or if you provided us with your details when you entered a competition or registered for a promotion, and, in each case, you have expressly consented to receiving that marketing.

You can ask us to stop sending you marketing messages at any time by following the opt-out or unsubscribe links on any marketing message sent to you, or by contacting us directly at privacy@ostrovni.com. Please note that opting out of marketing communications does not apply to personal data provided to us as a result of a service purchase, warranty registration, or other necessary transactions.

7. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site. We use different categories of cookies, including strictly necessary cookies, performance/analytics cookies, and targeting/marketing cookies.

Essential cookies are required for the operation of our website, such as allowing you to log into secure areas or make bookings. Analytics cookies help us understand how visitors use our site, while marketing cookies are used to track visitors across websites to display relevant advertisements.

You have the ability to accept or decline cookies. When you first visit our site, you will be presented with a cookie banner allowing you to manage your preferences. For more detailed information about the specific cookies we use, their purposes, and how to control them, please read our comprehensive Cookie Policy.

8. Sharing Your Information

We may have to share your personal data with selected third parties for the purposes set out in section 5. We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

These third parties include service providers acting as processors based in the UK who provide IT and system administration services, payment processing, and email delivery services. We may also share data with professional advisers acting as processors or joint controllers, including lawyers, bankers, auditors, and insurers who provide consultancy, banking, legal, insurance, and accounting services.

Furthermore, we may disclose your personal information to third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. We may also share information with law enforcement agencies or regulatory bodies if required by law. We firmly state that we never sell your personal data to third parties for independent marketing purposes.

9. International Data Transfers

Ostrovni Hospitality Ltd is based in the United Kingdom. However, some of our external third-party service providers may be based outside the UK, meaning their processing of your personal data will involve a transfer of data outside the UK. Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by implementing appropriate safeguards.

We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data. Where we use certain service providers, we may use specific contracts approved for use in the UK (Standard Contractual Clauses or the UK International Data Transfer Agreement) which give personal data the same protection it has in the UK.

If we rely on Binding Corporate Rules or other approved mechanisms, we will ensure that these provide sufficient guarantees regarding the protection of your privacy rights. If you would like further information on the specific mechanism used by us when transferring your personal data out of the UK, please contact our Data Protection Officer.

10. Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

By law, we have to keep basic information about our customers (including Contact, Identity, Financial, and Transaction Data) for seven years after they cease being customers for tax and legal purposes. Technical data is typically retained for 26 months. Marketing data is retained until you opt out or unsubscribe.

11. Your Rights Under UK GDPR

Under certain circumstances, you have rights under data protection laws in relation to your personal data. You have the right to request access to your personal data (a "data subject access request"), which enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.

You also have the right to request correction of the personal data that we hold about you, request erasure of your personal data, object to processing of your personal data where we are relying on a legitimate interest, request restriction of processing of your personal data, and request the transfer of your personal data to you or to a third party (data portability). Furthermore, you have the right not to be subject to a decision based solely on automated processing.

If you wish to exercise any of the rights set out above, please contact us at privacy@ostrovni.com. You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive. We may also refuse to comply with your request in these circumstances.

12. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. We limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

Our technical and organisational measures include data encryption in transit and at rest, secure network architectures, regular vulnerability scanning, and stringent access controls. We ensure all staff undergo comprehensive data protection training and understand their responsibilities regarding the safeguarding of client information.

We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so. We regularly review and audit our security policies and procedures to ensure they remain effective and robust against emerging threats.

13. Children's Privacy

Our website and the services offered at Ostrovni are not intended for children. The entertainment lounge, in particular, is strictly restricted to adults aged 18 and over in accordance with UK licensing and gambling laws. We do not knowingly collect personal data relating to anyone under the age of 18.

If we become aware that we have inadvertently collected personal data from a child under the age of 18, we will take immediate steps to delete such information from our records. We employ robust age verification processes both online (where applicable) and at our physical venue to ensure compliance with this restriction.

If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately so that we can take appropriate action to remove the data and prevent further access to our age-restricted services.

14. Third-Party Links

This website may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. For example, linking to our social media profiles or booking partners.

We do not control these third-party websites and are not responsible for their privacy statements or data handling practices. When you leave our website, we encourage you to read the privacy policy of every website you visit.

Ostrovni Hospitality Ltd accepts no liability for any information, content, products, or services available on or through such third-party websites, nor for any data privacy issues that may arise from your use of them.

15. Changes to This Privacy Policy

We keep our Privacy Policy under regular review to ensure it remains accurate, comprehensive, and compliant with changing legal requirements and our business practices. We reserve the right to update or modify this policy at any time.

Any changes we make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by email. The date of the most recent revision will appear at the top of this page under "Last updated".

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting the personal information we collect. Your continued use of our website and services following the posting of changes constitutes your acceptance of such changes.

16. Data Protection Officer

We have appointed a Data Protection Officer (DPO) who is responsible for overseeing questions in relation to this Privacy Policy. If you have any questions about this privacy policy, including any requests to exercise your legal rights, please contact the DPO using the details set out below.

You can contact our Data Protection Officer by email at privacy@ostrovni.com, or by writing to: Data Protection Officer, Ostrovni Hospitality Ltd, 42 Kensington High Street, London W8 4PT, United Kingdom.

When contacting the DPO, please provide sufficient information to identify yourself and clear details regarding your query or request, so that we can respond effectively and promptly.

17. Complaints

We take any complaints about our collection and use of personal data very seriously. If you think that our collection or use of personal information is unfair, misleading, or inappropriate, or have any other concern about our data processing, please raise this with us in the first instance by contacting our Data Protection Officer.

If you are not satisfied with our response or believe we are processing your personal data not in accordance with the law, you have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.

You can contact the ICO through their website at www.ico.org.uk, or by telephone on 0303 123 1113. We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.